$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32342e302f32342d3234203d3e20313430343639.roa File: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (raw, json) Hash identifier: o+t6IXXZJ4nVKh7Fjs01qIsZ6gI4rdJ87aU7Y1okiOU= Subject key identifier: 92:90:F6:60:9A:84:B5:7B:57:45:A7:28:D4:DF:96:43:40:75:57:4F Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Certificate serial: 3F5ACDB92932C461CB49D1EE647626AB737D3F36 Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32342e302f32342d3234203d3e20313430343639.roa Signing time: Sun 03 May 2026 02:13:10 +0000 ROA not before: Sun 03 May 2026 02:08:10 +0000 ROA not after: Sun 02 May 2027 02:13:10 +0000 asID: 140469 IP address blocks: 202.57.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:cd:b9:29:32:c4:61:cb:49:d1:ee:64:76:26:ab:73:7d:3f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Validity Not Before: May 3 02:08:10 2026 GMT Not After : May 2 02:13:10 2027 GMT Subject: CN=9290F6609A84B57B5745A728D4DF96434075574F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:8e:af:99:b7:51:a1:26:3a:82:5d:d8:3e: 72:0c:f9:7d:09:07:a6:6c:8b:a3:e8:8d:9f:b1:5b: b6:85:00:36:d3:93:12:df:94:d3:e3:77:26:93:2b: 80:9a:42:8d:1c:d8:70:23:fd:a8:55:63:f0:d6:21: 10:e2:c4:e5:ba:b7:d4:16:7b:f1:cf:5d:fc:15:5b: 47:33:31:6d:04:ff:c1:42:cd:70:97:ad:5c:bf:c9: eb:2d:8c:f9:31:ec:15:0d:2d:00:d3:ca:4d:db:ee: b3:fd:96:bc:57:50:32:ee:98:d3:86:97:d9:6c:07: 90:8b:58:90:e1:76:dd:be:db:8c:36:2a:f1:8d:19: 91:fb:40:92:bb:2e:35:da:84:f3:b3:50:8a:8d:d8: 7d:5e:a0:0e:84:3b:65:66:95:0f:c3:b9:af:cf:9a: 01:a6:c9:03:3b:5e:4b:22:3e:9e:ba:07:9a:39:07: 13:4b:34:b6:b3:c7:75:62:bf:c8:59:1a:0f:c8:a0: 3f:1d:6c:ad:56:7a:b3:17:d6:40:cb:34:13:2a:73: de:ac:92:3a:73:76:f3:f1:b0:aa:66:ad:1a:c6:89: 5e:43:c2:c4:b9:8a:e3:91:e7:89:34:43:25:88:6e: a9:5b:c0:2e:fd:e9:69:a3:09:79:f6:35:f2:ba:8d: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:90:F6:60:9A:84:B5:7B:57:45:A7:28:D4:DF:96:43:40:75:57:4F X509v3 Authority Key Identifier: keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32342e302f32342d3234203d3e20313430343639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.24.0/24 Signature Algorithm: sha256WithRSAEncryption 31:a9:e9:f2:93:b4:be:d7:8a:c2:f6:31:06:88:fe:71:8b:66: 4e:42:40:fc:27:66:19:04:23:b9:78:5d:10:4b:14:37:fd:61: 3d:45:0b:00:0e:91:7f:8a:dc:d9:7a:56:3c:47:2e:aa:39:ed: bd:b2:8b:00:09:5d:66:d7:8c:16:c4:90:ad:84:ed:93:bb:74: 02:5b:60:04:2b:70:a9:aa:10:cb:ae:62:69:f4:01:31:70:bb: 1d:f5:b7:4c:4e:7f:64:9a:f0:bc:09:f3:82:10:2a:38:7b:f5: 9f:25:d5:6c:c7:03:8d:b7:2e:ad:7a:3a:7f:02:e0:16:b4:10: 58:9b:bc:f5:f7:58:df:95:1b:0f:dc:67:42:8a:0d:b6:c5:36: fa:a3:c6:e7:f5:65:dd:2c:c4:9f:97:44:8f:54:35:a7:ce:e8: 98:47:0f:c4:a2:12:97:69:3f:49:79:9a:dd:04:aa:c7:df:b3: 2c:8a:fe:54:b5:6b:7b:b6:82:c4:9a:4e:ed:bd:41:73:8a:66: 43:1f:21:ee:22:23:de:1a:3e:af:98:ee:d5:1b:58:6f:a7:17: 6e:44:f9:b0:8f:d1:3d:9d:0f:bb:1a:7b:9f:19:24:9a:d7:04: f8:bb:97:a3:e6:3f:a2:3e:3c:3b:89:aa:b8:d3:aa:5c:92:06: 61:c0:9f:9f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUP1rNuSkyxGHLSdHuZHYmq3N9PzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1 QzgyQ0Q5QzAeFw0yNjA1MDMwMjA4MTBaFw0yNzA1MDIwMjEzMTBaMDMxMTAvBgNV BAMTKDkyOTBGNjYwOUE4NEI1N0I1NzQ1QTcyOEQ0REY5NjQzNDA3NTU3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVR46vmbdRoSY6gl3YPnIM+X0J B6Zsi6PojZ+xW7aFADbTkxLflNPjdyaTK4CaQo0c2HAj/ahVY/DWIRDixOW6t9QW e/HPXfwVW0czMW0E/8FCzXCXrVy/yestjPkx7BUNLQDTyk3b7rP9lrxXUDLumNOG l9lsB5CLWJDhdt2+24w2KvGNGZH7QJK7LjXahPOzUIqN2H1eoA6EO2VmlQ/Dua/P mgGmyQM7XksiPp66B5o5BxNLNLazx3Viv8hZGg/IoD8dbK1WerMX1kDLNBMqc96s kjpzdvPxsKpmrRrGiV5DwsS5iuOR54k0QyWIbqlbwC796WmjCXn2NfK6jVXfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkpD2YJqEtXtXRaco1N+WQ0B1V08wHwYDVR0j BBgwFoAUnbjEcj47/dATinkWqLsSxFyCzZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQzZjA5NWItNzEzMC00MTIyLWFmMjUtN2QyZTdhMTFiMWIxLzAvOURCOEM0NzIz RTNCRkREMDEzOEE3OTE2QThCQjEyQzQ1QzgyQ0Q5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REI4QzQ3MjNFM0JGREQwMTM4QTc5MTZBOEJCMTJDNDVDODJD RDlDLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBkM2YwOTViLTcxMzAtNDEyMi1h ZjI1LTdkMmU3YTExYjFiMS8wLzMyMzAzMjJlMzUzNzJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo5GDANBgkqhkiG 9w0BAQsFAAOCAQEAManp8pO0vteKwvYxBoj+cYtmTkJA/CdmGQQjuXhdEEsUN/1h PUULAA6Rf4rc2XpWPEcuqjntvbKLAAldZteMFsSQrYTtk7t0AltgBCtwqaoQy65i afQBMXC7HfW3TE5/ZJrwvAnzghAqOHv1nyXVbMcDjbcurXo6fwLgFrQQWJu89fdY 35UbD9xnQooNtsU2+qPG5/Vl3SzEn5dEj1Q1p87omEcPxKISl2k/SXma3QSqx9+z LIr+VLVre7aCxJpO7b1Bc4pmQx8h7iIj3ho+r5ju1RtYb6cXbkT5sI/RPZ0Puxp7 nxkkmtcE+LuXo+Y/oj48O4mquNOqXJIGYcCfnw== -----END CERTIFICATE-----Generated at Wed May 13 02:51:01 2026 by rpki-client